Senior Backend / Infrastructure Engineer

Quick Facts

• Role: Senior Backend / Infrastructure Engineer

• Focus: Backend infrastructure for a health platform handling PHI (HIPAA/SOC 2)

Description

Own and harden the backend infrastructure for a health-tech platform handling protected health information (PHI), ensuring strong security, compliance readiness (HIPAA, SOC 2), and controls that can’t be bypassed. Build event-driven ingestion and high-performance storage, indexing, and querying of heterogeneous health data while scaling serverless services and maintaining observability, low latency, and high uptime.

Responsibilities

• Security and compliance: implement PHI protections (KMS encryption, secrets management, least-privilege IAM, audit logging); lead HIPAA and SOC 2 work with leadership; embed consent, de-identification, and access controls in the data model; run threat modeling, vulnerability detection, dependency hygiene, and WAF/GuardDuty/Security Hub remediation.

• Data platform at scale: design storage and indexing for large volumes of structured/clinical health data; optimize PostgreSQL queries for both member-facing views and internal analytics.

• Event-driven ingestion: build pipelines to parse, normalize, deduplicate, and backfill records reliably.

• Scalability and reliability: scale a serverless architecture (Lambda concurrency, Aurora Serverless, queue backpressure, caching, cost-aware performance tuning); own observability, alerting, and capacity planning.

• Infrastructure as code and delivery: use AWS CDK for infrastructure; deploy via GitHub Actions with OIDC and no long-lived keys (manual approval for production).

Requirements

• 5+ years building production backend systems

• Real experience scaling something that was under load

• Production experience with AWS (Lambda, Postgres/Aurora, IAM) and infrastructure as code (ideally CDK)

• Strong grasp of application and cloud security; regulated environment experience (HIPAA/SOC 2/PCI) is a plus

• Deep PostgreSQL experience: schema design, indexing strategy, query tuning, partitioning

• Experience with distributed/event-driven systems: queues, retries, idempotency, failure modes

• Comfort with ambiguity and ownership (early team; no ticket queue hiding work)

Benefits

• Competitive pay and generous equity with early-stage ownership

• Impact: architecture decisions shape the company for years

• Mission: help people take control of their own health

• In-person in San Francisco: small, fast team working side by side